Docs

[stuartborders]

I have transferred a working site to my server. I download X to redesign it with X theme. 🙂

I upload it to the server (and the recently downloaded child theme) and activate it. I keep getting a “hacked” message. When I activate a fresh “2016” theme the site functions as it should. My host says that the theme must have been compromised.

Please advise. http://67.225.162.113/~solutionstair/

[John Ezra]

Hi there,

Thanks for writing in and sorry you are experiencing an issue. This isn’t normal so we would like to look into it. Would you mind providing more detail about your situation? We aren’t able to replicate the issue on our end so it may be unique to your site.

Just to clarify, the issue is happening when you try to load X onto an existing site, correct? And not when starting off fresh with the same copy of X?

If that is the case then something must be conflicting with your current site.

Please provide us info on the hosting you are using and also please let us know what the “hacked” messaged says and where it is located. Screenshots or videos will help a lot if possible.

I will also put in a note to our team regarding this so we’ll be on a lookout. Thanks!

Update: A colleague of mine did a check and found that it may have something do do with an active widget via a plugin you or your host installed. When switching themes it will deactivate widgets not in it’s registered sidebars so it will work fine that way.

<div id="text-2" class="widget widget_text"> <div class="textwidget"><script>document.documentElement.innerHTML = unescape('%3c%68%74%6d%6c%20%6c%61%6e%67%3d%22%65%6e%22%3e%3c%68%65%61%64%3e%0d%0a%20%20%20%20%20%20%20%20%3c%74%69%74%6c%65%3e%48%41%43%4b%45%44%

This is what is coming up. You can try testing for a plugin conflict.
You can do this by deactivating all third party plugins, to see if the problem remains. If it’s fixed, you’ll know a plugin caused the problem, and you can narrow down which one by reactivating them one at a time.

Let us know how that goes. Hope this helps – thanks!

[stuartborders]

Ok That was weird. I deactivated all the plugins (except cornerstone) and it still was there. So then I checked the widget area. there was a text widget with that weird code in it. It was on their live site as well. So I deleted it and now the site is working. I wouldn’t thought to look there. THANK YOU!!!!

[Rupok]

You are welcome!

Glad that you figured it out. Feel free to let us know if you face any other issue. We’ll be happy to assist you.

Thanks for using X.

Cheers!

[Author]

Posts